1. Introduction

YSK Limited ("YSK", "we", "us", or "our") is a Hong Kong–based technology company providing remote developer outsourcing, custom software development, cloud hosting, enterprise AI deployment, proprietary SaaS products, and the public news section at ysk.hk/news. This Privacy Policy and Service Terms ("Policy") explains how we collect, use, disclose, and protect personal data, and sets out important terms governing our relationship with you when you use our website (including the News), engage our professional services, or access our products.

By accessing ysk.hk (including /news, short links under /r/, search and tag pages), contacting us, signing a service agreement, uploading materials to our systems, or using any YSK-managed application, you acknowledge that you have read and understood this Policy. Where a separate written contract, statement of work, or product licence exists, that document prevails in the event of conflict, except that this Policy applies to baseline privacy and data-handling obligations unless expressly superseded.

2. Definitions

• "Client" — any individual or organisation that purchases or receives YSK professional services, including outsourcing, development, hosting, or AI deployment.
• "End User" — any person who uses a website, mobile app, or SaaS product operated by YSK or developed/hosted for a Client.
• "Personal Data" — data relating directly or indirectly to an identifiable living individual, as defined under the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").
• "Services" — all professional, technical, hosting, consulting, and support services provided by YSK, including Remote Dev Team plans, private LLM managed deployment, DevOps, Web3 infrastructure, and app store submission assistance.
• "Products" — software operated or published by YSK, including SalonEase, SoulMD Hub, SlashMap, YSK Mint, InstantDrama Magician, YSK Omni, Grok CLI Gateway (gctoac), YSK Server, YSK Kit, and any future YSK-branded platforms.
• "News" — the public content area of our website at ysk.hk/news (and language variants such as ysk.hk/en/news), including article pages, tag and search pages, short redirect URLs under ysk.hk/r/, and related media stored for publication. Addresses previously published under ysk.hk/blog and ysk.hk/en/blog permanently redirect (HTTP 301) to the corresponding News URLs.
• "Client Materials" — source code, datasets, credentials, business records, media, and any content supplied by or on behalf of a Client.

3. Scope & Our Role

This Policy applies to: (a) visitors to our website, News, and marketing channels; (b) Clients and their authorised personnel; (c) End Users of YSK Products; and (d) End Users of applications developed, hosted, or maintained by YSK on a Client's behalf, where YSK processes data as instructed by that Client.

YSK acts as a data user (controller) for data collected through our website (including the News), billing, account administration, and YSK Products. For Client Materials and End User data processed solely to deliver bespoke development or managed hosting, YSK typically acts as a data processor / service provider on the Client's instructions. Clients remain responsible for establishing a lawful basis and providing appropriate notices to their own End Users.

4. Personal Data We Collect

Depending on your relationship with YSK, we may collect the following categories of data:

• Identity & contact data — name, company name, job title, email, telephone, WhatsApp number, billing address.
• Account & contractual data — login credentials (hashed), service plan, invoices, payment records, correspondence, support tickets.
• Technical & usage data — IP address, browser/device type, access logs, error reports, API call metadata, session timestamps, security audit trails, and server logs generated when you browse the website or News (including short-link redirects, tag pages, and search queries submitted on News search).
• Client Materials — source code repositories, training datasets, configuration files, API keys (stored encrypted), deployment artefacts, and project documentation.
• Communications — emails, chat messages, meeting notes, and recordings where you have given consent or we have a legitimate business need.
• Product usage data — for YSK SaaS Products, account activity, feature usage, and operational logs necessary for service delivery and security.
• News administration credentials — password-protected access for authorised personnel who publish or update News content; such credentials are used solely for content management and security, not for public News readers.

We do not intentionally collect sensitive personal data (e.g. health, biometric, or financial account credentials beyond billing) unless required for a specific engagement and agreed in writing. Clients must not submit special-category data to general-purpose systems without prior written approval and appropriate safeguards. The public News does not require reader registration and does not provide public commenting.

5. How We Use Personal Data

We use Personal Data only where permitted under the PDPO and applicable law, including for:

• performing contracts and delivering Services or Products requested by you;
• providing technical support, incident response, and account management;
• operating, securing, and improving our infrastructure and website (including the News), including monitoring, backups, fraud prevention, search, and short-link redirection;
• publishing and maintaining public News articles, tags, media, and related SEO metadata;
• complying with legal, regulatory, tax, and law-enforcement obligations;
• sending service-related notices; and, where permitted, relevant business communications with opt-out available.

We do not sell Personal Data. We do not use Client Materials or confidential datasets to train public or general-purpose AI models unless you provide explicit written consent for a defined purpose.

6. Client Responsibilities, Acceptable Use & Indemnity

Clients are responsible for the accuracy, legality, and authority of all Client Materials and instructions provided to YSK. Clients must ensure that collection and transfer of End User data to YSK complies with applicable privacy laws and that required consents and privacy notices are in place.

Prohibited uses include uploading malware, unlawful content, data obtained without authority, or materials that would cause YSK to breach law or platform policies (including Apple App Store and Google Play requirements). We may suspend access where we reasonably believe a breach has occurred.

7. Artificial Intelligence & Automated Processing

Certain Services involve AI-assisted development, private large language model ("LLM") deployment, inference APIs, chatbots, or automation workflows. You acknowledge that AI systems are probabilistic and may produce incomplete, outdated, or incorrect outputs ("hallucinations").

• AI outputs are provided for assistance only and do not constitute legal, financial, medical, or professional advice.
• Clients must independently review AI-generated code, content, and recommendations before production use or reliance.
• For enterprise private LLM engagements, processing is performed within environments specified in the relevant service agreement; by default, confidential Client datasets are not used to improve models for other clients.
• YSK does not guarantee uninterrupted availability, benchmark performance, or fitness of AI outputs for any particular purpose.

8. Data Security, Localization & Cross-Border Transfers

We implement appropriate technical and organisational measures consistent with PDPO Data Protection Principle 4, including encryption in transit and at rest where appropriate, access controls, logging, patching, and least-privilege administration. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Hosting locations depend on the Service: standard plans may include dedicated virtual servers in approved jurisdictions (e.g. United States) as described in your plan; private LLM and on-premises deployments follow the architecture agreed in writing. Cross-border transfers, where applicable, are limited to what is necessary for service delivery and protected by contractual safeguards. Unauthorized transfers of Client Materials outside agreed environments are prohibited.

9. Disclosure, Sub-Processors & Third Parties

We may disclose Personal Data to:

• trusted infrastructure, payment, communications, and security vendors acting under contract and confidentiality obligations;
• professional advisers (legal, accounting, insurance) under duty of confidence;
• regulators, courts, or law enforcement where required by law; and
• successors in the event of a merger, acquisition, or asset transfer, subject to equivalent protections.

Our Services may integrate third-party platforms (e.g. cloud providers, app stores, messaging APIs, blockchain networks). YSK is not responsible for the privacy practices of third parties outside our control. Clients are responsible for reviewing third-party terms applicable to their projects.

10. Data Retention & Deletion

We retain Personal Data only for as long as necessary for the purposes described above, including:

• Technical logs & security records: typically up to 90 days, unless required for incident investigation.
• Client Materials & project files: for the active service term and a reasonable handover period; deleted or returned upon contract termination unless retention is required by law or agreed backups.
• Account & billing records: up to 7 years where required for tax and accounting purposes.
• Public News content: articles, tags, images, and short-link mappings may be retained for as long as they remain published for marketing, SEO, and archival purposes, or until we elect to remove or update them.
• Encrypted backups: purged on a rolling schedule, generally within 90 days of primary deletion.

Deletion requests may be sent to [email protected]. We will action verified requests within 14 business days for active systems, subject to legal retention obligations and backup cycles. Where YSK processes data on behalf of a Client, End Users should contact the Client first; YSK will assist the Client as reasonably required.

11. Your Rights under the PDPO

Subject to the PDPO and applicable exceptions, you may request access to or correction of Personal Data held about you. Requests should be sent to [email protected] with sufficient identity verification. We aim to respond within 40 days. A reasonable fee may be charged for manifestly unfounded or excessive access requests. You may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong.

12. Cookies & Website Analytics

Our website (including the News) may use essential cookies for security and basic functionality (for example, maintaining an authenticated session on restricted administration pages). Where analytics or preference cookies are used, we will provide appropriate notice. You may control cookies through your browser settings; disabling certain cookies may affect site functionality.

13. Website News

The News publishes publicly available articles, images, tags, and related materials on topics such as technology, AI, Web3, and industry news, together with YSK marketing information. Content may summarise or comment on publicly reported information; titles, commentary, and presentation are produced for YSK's website and marketing purposes.

• No reader accounts or public comments. Browsing, tag filtering, and full-text search on the News do not require registration. We do not offer a public comment system on News articles.
• Short links. URLs under ysk.hk/r/ redirect to the corresponding News article. Server logs may record the redirect request (e.g. IP address, user agent, and time) for security and reliability.
• Search queries. Queries you submit on News search may be processed to return results and may appear in technical logs. Do not enter sensitive personal data into search fields.
• Outbound links. News articles may contain links to third-party websites. Those sites are outside YSK's control; their privacy practices are governed by their own policies.
• Content administration. Only authorised YSK personnel may publish or update News content. Administration access is restricted and protected; the public is not invited to upload content through the News reader interface.
• Intellectual property. Unless otherwise stated, YSK's arrangement, design, and original wording on the News are protected. Third-party trademarks or news subjects remain the property of their respective owners and are referenced for identification or commentary only.
• Former addresses. URLs under ysk.hk/blog and ysk.hk/en/blog permanently redirect (HTTP 301) to the corresponding News URLs.

14. Software Disclaimer & Limitation of Liability

Except as expressly stated in a signed agreement, Services and Products are provided on an "as is" and "as available" basis. To the fullest extent permitted by Hong Kong law, YSK disclaims all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.

15. Force Majeure, Suspension & Changes

YSK is not liable for delay or failure caused by events beyond reasonable control, including upstream cloud or app-store outages, network failures, cyberattacks, natural disasters, labour disputes, or government actions. We may update this Policy from time to time; material changes will be posted at ysk.hk/privacy-policy with an updated effective date. Continued use after changes constitutes acceptance where permitted by law.

16. Confidentiality, Intellectual Property & Governing Law

Each party shall protect the other's confidential information using reasonable care and use it only for the engagement. Unless otherwise agreed in writing, Clients retain ownership of Client Materials and pre-existing IP; YSK retains ownership of its pre-existing tools, frameworks, and general know-how. Deliverable ownership is governed by the applicable service contract.

This Policy is governed by the laws of the Hong Kong Special Administrative Region. Disputes shall first be addressed through good-faith negotiation. If unresolved, parties may refer the matter to mediation or arbitration at the Hong Kong International Arbitration Centre (HKIAC) under its applicable rules. If any provision is held invalid, the remainder remains in effect.

YSK Limited — Legal & Privacy
Privacy enquiries: [email protected] | General: [email protected] | WhatsApp: +852 6160 4242